"Operation Zero Disco" exploits a critical Cisco SNMP flaw (CVE-2025-20352) to deploy Linux rootkits on switches. The malware sets a universal "disco" password and hides configuration to maintain persistence.

Samba released an urgent fix for a Critical (CVSS 10.0) RCE flaw (CVE-2025-10230) allowing unauthenticated command injection on AD DCs when the WINS hook is enabled. Update to 4.23.2.

Unit 42 exposed PhantomVAI Loader, a stealthy MaaS tool that uses steganography (hiding DLL in images) and VM detection to deploy Katz Stealer in MSBuild.exe and exfiltrate crypto credentials globally.

Symantec exposed China's Jewelbug APT in an unprecedented 5-month intrusion on a Russian IT provider. The group used Yandex Cloud for data exfiltration and Graph API for stealthy C2 via custom malware.

Apache issued a critical fix for ActiveMQ NMS AMQP Client (CVE-2025-54539). The deserialization flaw allows untrusted AMQP servers to execute remote code on client systems.

Multiple major online services, including YouTube, X/Twitter, and Steam, suffered simultaneous outages suspected to be caused by a temporary datacenter route failure primarily affecting the U.S. East Coast.

Kaspersky exposed the Mysterious Elephant APT targeting South Asia. The group uses MemLoader and custom tools (BabShell) to steal sensitive WhatsApp desktop data and exfiltrate documents.

ReliaQuest exposed Flax Typhoon for a year-long breach, where the China-backed APT turned a legitimate ArcGIS Java SOE into a web shell and embedded it in backups to ensure persistence.

Keeping your network secure starts with knowing what’s exposed. This guide shows you how to use Naabu, the powerful open-source port…

Your terminal isn’t just for code — it can talk, play, and even laugh. These 10 hidden Linux commands are pure geeky joy.

Are you able to compromise this Terminator themed machine?

web->dirbrust->command excution->bypass->reveshell->hidden file->su user->find PE

Task 1: Brief

Imagine getting a ZIP file from a friend or colleague on WhatsApp maybe a receipt, a document or a payment confirmation. You open it on…

The Hacker Duel “Mission Accomplished”

Why Enterprises Fail at Continuous Assurance — and How to Succeed

What My First Failed Interview Taught Me About Real Preparation

What is Control 3.1.20?

I recently came across this amazing platform. BugBountyHunt.com is a specialized directory and platform designed to bridge security…